How To Set Up Access to Cloudera EDH or Altus Director (Microsoft Azure Marketplace)

The Cloudera Enterprise Data Hub (EDH) and Cloudera Altus Director bundles that are available on the Microsoft Azure Marketplace only support SSH access (port 22). To access Cloudera
Manager (port 7180), Altus Director (port 7189), or other services, you can:

Set up a SOCKS (Sockets Secure protocol) proxy on your client machine. Cloudera recommends that you use
this option.

Add inbound rules to the Network Security Group in the Azure instance after you deploy EDH or Director to Azure.

Configure the SOCKS Proxy

The SOCKS5 protocol is implemented as a client and server process that enables traversal of IP network firewalls. After you configure the SOCKS proxy, your browser resolves DNS lookups
using the Microsoft Azure network (through the proxy server), and lets you connect to services using internal FQDNs or private IP address.

With this approach, you complete the following tasks:

Set up a single SSH tunnel to one of the hosts on the network and create a SOCKS proxy on the host.

Change the browser configuration to perform all lookups through the SOCKS proxy host.

Network Prerequisites

Verify the following prerequisites before you connect to your cluster with a SOCKS proxy:

You must be able to reach the host that you want to proxy to from the public internet or from the network that you're connecting from.

The host that you proxy to must be on the same network as the Cloudera services that you're connecting to. For example, if you’re using the Cloudera EDH offering, tunnel to the
Cloudera Manager host. If you're using the Altus Director offering, tunnel to the Altus Director host.

Find the Public IP of the Host

Only one VM is created for the Altus Director. Use the public IP of that VM.

For the Cloudera EDH offering, use the public IP of the 0th master node VM: [dnsName]-mn0.

In this Chrome session, you can use the private IP address or internal FQDN to connect to any host that is accessible by Altus Director. For example, if you proxy to the Altus Director
server, you can connect to Altus Director as if it were local by entering localhost:7189 in the Chrome URL bar.

Network Security Group

Warning: This method is not recommended for any purpose other than a Proof of Concept. If the data is not carefully locked down, it will be accessible to
hackers and malicious entities.

If this documentation includes code, including but not limited to, code examples, Cloudera makes this available to you under the terms of the Apache License, Version 2.0, including any required
notices. A copy of the Apache License Version 2.0 can be found here.